That's how class actions work. The lawyers extract a fee from the perpetrator as protection against larger settlements/judgments. Perp limits their downside, law firm gets paid, consumers are left holding the bag.

AFAIK, one of our attorneys was involved in 2 with Target, one for $10mil and one for $13mil. We're also involved with Home Depot and other data breach cases. They scope of those breaches is much smaller than this one, by the way.

I'm just saying that some firms try. There's really nobody making them accountable otherwise.

This isn't Equifax's first data breach and the others are pretty recent too.